sylius/refund-plugin
Healthy and suitable to use. It has regular releases, a current stable version, active organization backing, tests, release notes, and security tooling; recent repository activity is light, but not absent.
86%
Total Score
83
94
88
Health Score Breakdown
The package is flagged as resembling sylius/resource-bundle and is marked as borrowing its identity, but artifact overlap is very low and the package is transparently identified as a refund plugin in its README. This is a minor naming concern, not evidence that the package is a copy.
Two commits from two active maintainers in the last three months show ongoing maintenance, although the pace is light and warrants monitoring alongside the strong release history.
One workflow lacks top-level permissions and another requests top-level write access, leaving some workflow privilege configuration less restrictive than ideal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mateusz Zalewski |
| Bartosz Pietrzak |
| Sylius Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^2.0 | — | — |
myclabs/php-enum Version ^1.8 | — | — |
sylius/telemetry Version ^1.0 | — | — |
symfony/messenger Version ^6.4 || ^7.4 | — | — |
php-http/discovery Version ^1.20 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.